Scanners produce findings. Pipelines produce reports. VulnTrek is the layer that decides which exposure matters, who owns it, what happens next, and proves it was carried through to closure — with read-only intel tools you can use today for free, and a release gate your CI can call.
Five read-only tools over the CISA KEV catalog, the EU Vulnerability Database and IT/OT vendor advisories. No signup, no API key, works in Claude, Cursor and any MCP client.
Ask VulnTrek whether a build carries exposure that should block release, and get a token-scoped answer with the reasoning attached — instead of parsing a scanner report in a pipeline script.
Findings arrive from your scanners and get deduplicated at intake, scored on real signals, and assigned an owner — so engineers see one ranked queue rather than one report per tool.
Skills are advisory. Remediation needs human approval. Every status and verification change writes its own append-only evidence entry, so the trail holds up long after the sprint.
Every record is scoped to an organisation and enforced in the database, not in application code — which is what makes it safe to run for many teams or many clients from one deployment.
Answers about authentication, rate limits, data scope and what the free tier covers.